Static task
static1
Behavioral task
behavioral1
Sample
81100858846c1c9e6463738fef46e18090d19abea343f6d15adfec26a653325b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
81100858846c1c9e6463738fef46e18090d19abea343f6d15adfec26a653325b.exe
Resource
win10v2004-20221111-en
General
-
Target
81100858846c1c9e6463738fef46e18090d19abea343f6d15adfec26a653325b
-
Size
156KB
-
MD5
1cd7c58b67d6a066537448e2ab1271c4
-
SHA1
f41c9119184b79ec9deae15d52d6793239292c5c
-
SHA256
81100858846c1c9e6463738fef46e18090d19abea343f6d15adfec26a653325b
-
SHA512
1a7595eb10f7822c36ae7169cedebaa14177aa82971b2f1cab808e0190dd126f902b7be6b375f04c06490aa09cdf0ac862ea860885bfb1b9b0d6b879d4f811e4
-
SSDEEP
3072:a8prhpqETDDfPm+8Blwv2W/qMOwFGpoQYNub8l5g:a8pVpxHTMBavFqMtFGqNTg
Malware Config
Signatures
Files
-
81100858846c1c9e6463738fef46e18090d19abea343f6d15adfec26a653325b.exe windows x86
3e8422a2b6c8658aeab6aafe685b63d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetCommandLineW
IsBadCodePtr
CreateFileA
GetACP
TlsAlloc
GetStdHandle
GetEnvironmentVariableA
HeapCreate
ResetEvent
SetEvent
SetLastError
CreateFileMappingA
HeapDestroy
GetModuleFileNameA
TlsGetValue
GetStartupInfoA
GetFileAttributesW
lstrlenA
ReleaseMutex
user32
GetClassInfoA
DrawTextW
DispatchMessageA
DestroyMenu
IsZoomed
PeekMessageA
IsWindow
CallWindowProcW
DispatchMessageA
GetSysColor
GetWindowLongA
CreateIcon
FindWindowA
stclient
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
timedate.cpl
CPlApplet
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 147KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE